From 6fa7126e75a142ad06a819ec5aac1b8f7782fb4c Mon Sep 17 00:00:00 2001
From: abearxiong <xiongxiao@xiongxiao.me>
Date: Wed, 4 Mar 2026 21:42:57 +0800
Subject: [PATCH] =?UTF-8?q?=E6=96=B0=E5=A2=9E=E9=80=9A=E9=85=8D=E7=AC=A6?=
 =?UTF-8?q?=E5=AD=90=E5=9F=9F=E5=90=8D=E6=94=AF=E6=8C=81=E7=9A=84=20Ingres?=
 =?UTF-8?q?sRoute=20=E9=85=8D=E7=BD=AE=EF=BC=8C=E6=94=AF=E6=8C=81=20nfc.ke?=
 =?UTF-8?q?visual.cn=20=E7=9A=84=20HTTPS=20=E8=AE=BF=E9=97=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../ingress/apps-ingressroute.yaml            | 22 ++++++++++++++++++-
 k8s/kevisual.cn/ingress/match-kevisual.yaml   | 20 +++++++++++++++++
 2 files changed, 41 insertions(+), 1 deletion(-)
 create mode 100644 k8s/kevisual.cn/ingress/match-kevisual.yaml

diff --git a/k8s/kevisual.cn/ingress/apps-ingressroute.yaml b/k8s/kevisual.cn/ingress/apps-ingressroute.yaml
index 5c60aeb..05ead58 100644
--- a/k8s/kevisual.cn/ingress/apps-ingressroute.yaml
+++ b/k8s/kevisual.cn/ingress/apps-ingressroute.yaml
@@ -68,4 +68,24 @@ spec:
         - name: websocket-headers
   tls:
     certResolver: letsencrypt
----
\ No newline at end of file
+---
+# 通配符子域名支持 *.kevisual.cn (兜底规则)
+# apiVersion: traefik.io/v1alpha1
+# kind: IngressRoute
+# metadata:
+#   name: wildcard-kevisual-https
+#   namespace: default
+# spec:
+#   entryPoints:
+#     - websecure
+#   routes:
+#     - match: HostRegexp(`^[a-zA-Z0-9-]+\.kevisual\.cn$`)
+#       kind: Rule
+#       services:
+#         - name: kevisual-external
+#           port: 3005
+#           serversTransport: websocket-transport
+#       middlewares:
+#         - name: websocket-headers
+#   tls:
+#     certResolver: letsencrypt
\ No newline at end of file
diff --git a/k8s/kevisual.cn/ingress/match-kevisual.yaml b/k8s/kevisual.cn/ingress/match-kevisual.yaml
new file mode 100644
index 0000000..9db22a4
--- /dev/null
+++ b/k8s/kevisual.cn/ingress/match-kevisual.yaml
@@ -0,0 +1,20 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nfc-kevisual-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`nfc.kevisual.cn`)
+      kind: Rule
+      services:
+        - name: kevisual-external
+          port: 3005
+          serversTransport: websocket-transport
+      middlewares:
+        - name: websocket-headers
+  tls:
+    certResolver: letsencrypt
+---
\ No newline at end of file